featuring the 'a' variant of the worm, aka the very first one. pretty annoying but not that harmful (unless you lose some unsaved work from an unscheduled restart).
Somebody should have given this worm to JC the Hyena while we was writing sonic.exe
@ahniandfriends123
9 жыл бұрын
And also modify the code so that it reboots the computer everytime the words "hyper-realistic blood" appear in a document or at the title bar.
@RamayannaMatana
9 жыл бұрын
ahniandfriends123 That should possible, by modify the VBS script...
@cleb6720
8 жыл бұрын
yes
@Garnet-the-Eve-probe
5 жыл бұрын
YES! XD That would be funny! Haha! XD
@ExzcellionGamma
7 жыл бұрын
This was my first encounter of any malware in my PCs. Back then it was known as Rontokbro. The exe files copying the folder icons and the parent folders, and the fact that any windows with names like "registry", "msconfig", any known antimalware names at the time, the machine is forced to reboot is sooo annoying.
@TheXDS
10 жыл бұрын
I actually had to deal with two variants. I was able to save one of them in a compressed folder. Yes, the machine gets rebooted each time the word "registry" or ".exe" appears an a window, but also will restart (at least in my variant) if you go to any system folder. The Internet Explorer message was followed by a html page installed on the computer, talking about stopping abortion and some other campaigns. the virus will create copies of itself on each folder it can, disguising itself as such and opening the explorer process when opened. the machine will get slower, and the disk will be full of these copies. Task Manager is also blocked and cannot be run.
@DATrB15
11 жыл бұрын
This worm!, i remember having it around the year 2007, i was fascinated about how something from indonesia traveled all the way and made it to my PC how and artificial intelligence made it so far... this is basically what made me learn programming, it was so interesting back then.
@nameisChannelID
3 жыл бұрын
7 years later and you got a reply saying this message
@DATrB15
3 жыл бұрын
@@nameisChannelID wtf
@siphokhumalo193
5 ай бұрын
Bruh Im in South Africa and experienced this around the same year as you probably, oh my god this goddamn worm!!😂😂😂 The memories, the pain!! 😭😭😭
@LlamaFluff
11 жыл бұрын
That was the quickest boot I ever saw XP do, lol
@HBC101TVStudios
4 жыл бұрын
It's a VM
@LlamaFluff
4 жыл бұрын
HBC 101 I know but it’s still very quick compared to what people are used to with XP
@DangerWrap
2 жыл бұрын
@@LlamaFluff VM on SSD.
@Ukiby3000
9 жыл бұрын
Watching this video I got nostalgic about my Windows XP...
@DylanDude
5 жыл бұрын
Same here.
@danooct1
11 жыл бұрын
embrace the XP
@t-ubercomi
4 ай бұрын
Dan's comment needs even more attention after 2013-2014!
@x7upsuperstar
7 жыл бұрын
I like worms like this - they don't do anything seriously bad to the machine, but they're incredibly annoying and evasive.
@slap_my_hand
8 жыл бұрын
Wow. That thing is smart.
@PlayingWithMahDS31
11 жыл бұрын
*opens Sonic.exe* *randomly restarts* Aww, DAMMIT
@43DarkNero
10 жыл бұрын
change username to registry. xD
@headbang4416
9 жыл бұрын
:D
@scaprod558
9 жыл бұрын
+43Dark Nero Oh Gosh... Bad Times Begin... Time To Do exe.EditReg ...
@lily__r
7 жыл бұрын
registry editor.exe → double triggered
@arisstephenson
8 жыл бұрын
I searched the brontok virus only because I heard about it and I thought to myself, hmm dannoct should do a video on this. Apparently he already did :)
@gentlestress
11 жыл бұрын
Danooct has done several videos on these - they're called rogue antiviruses. They're usually not explicitly harmful - more like scareware/adware to try and wrench money out of you - but they do tend to stick around hard nonetheless. There are usually instructions/tools for a number of these programs out there on the web.
@JackBond1234
11 жыл бұрын
I always liked those sounds, but it's been burned into my memory the sound of those tones being all glitchy and skippy due to a lack of audio processing power or something like that. So now every time I hear those sounds, I cringe in wait of the glitchy noise.
@NSHG
8 күн бұрын
Found this once on a LGA775 machine that came with the owner's old HDD. Surprisingly plain install yet somehow Brontok was wreakin' havoc. One thing I defo remember on mine - Task Manager DID work. AVs were picking it up as Brontok.A for whatever reason but I definitely doubt it was A.
@TheXDS
10 жыл бұрын
Also, the virus was appaerently made in two parts, or by two hackers, identified themselves as Bron-Spizaetus and Tok-Cirrhatus
@hyperinvox9129
8 жыл бұрын
So they used their ship name for the virus.... Omfg
@zxcvbnm5758
24 күн бұрын
Nah, sorry for necroing your comment, but those names came from brontok eagle Bron + Tok: Brontok, Elang brontok (Brontok Eagle) Nisaetus cirrhatus (latin name)
@TheXDS
24 күн бұрын
Hmmm... Interesting... I did not know that... But that leaves the mystery of spizaetus and cirrhatus
@zxcvbnm5758
23 күн бұрын
@@TheXDS Spizaetus Cirrhatus is a latin name for Elang Brontok. He/she might be took that name from here: id.wikipedia.org/wiki/Elang_brontok
@YouareDEDnotbigSurprise
11 жыл бұрын
Hey, awesome! So many videos, lovin' it! :D
@danilmironov3944
3 жыл бұрын
Imagine getting this in 2021... Oops, my imaginations materialized!
@blackice1029
11 жыл бұрын
The most appropriate response, haha! Great upload, thank you :)
@DragONheart27X
6 жыл бұрын
This goddamn thing was tricky and caused me headaches when I was young.
@Tuetuopay
11 жыл бұрын
You missed the point that it copies itself to any removable media (USB key, external HDD, ....) plugged to the computer, and in EVERY subfolder of the media, taking the name of the folder, ereasing any exe previously here. I got it from my school on my 16GB USB key with lots of portable software (meaning a lot of subfolders), an antivirus scan revealed it copied itself about 5000 times. Pretty annoying.
@VictorGamer1
3 жыл бұрын
i sent my pen drive and a camera SD card to a small and old store of photography and image services that had an old and yellow colored windows xp machine. they transfered the files to me with a brontok.q variant, detected by kaspersky. Then i searched for that and discovered this video
@condo767
11 жыл бұрын
keep em coming bro, these are interesting
@puszujtowera
8 жыл бұрын
Had one of versions of this one on my laptop few years back, was all the time poping up some payload html site with some indonesian and english (saying "say no to alcohol" or sth like that) on green background pretty annoying :D
@clem5858
11 жыл бұрын
Omg danooct, slow down xD Kidding, thx for ALL the videos.
@barterer124
11 жыл бұрын
*starts rebooting* *DA DAH DUH DAAAH* *XPgasm*
@TheCanadianWifier
11 жыл бұрын
These are awesome :]
@rizqiprtm
4 жыл бұрын
I remember that thing attacked my notebook in 2016. I'm using Windows XP that time, cause my old notebook using 1GB RAM and Intel Atom processor. The brontok make my notebook slow, especially when it starting up, it need 1 minute to show the taskbar and the desktop icon.
@daking3216
3 жыл бұрын
its pretty easy to remove
@rizqiprtm
3 жыл бұрын
@@daking3216 I don't know if it's easy to remove, but i use Brontok Remover to remove the virus. I don't remember if the app is successfully removed the virus or not, the only thing i remembered is i reseted the laptop to factory settings.
@Sypaka
6 жыл бұрын
Oh, it's either restricting access to "Folder Options" or deleted them right away. Little tech info: All options you see while using "Folder Options" are actual registry keys, which act as switches for other keys. You can even make your own options, when you understand how they work. I had a nasty virus deleting them and then I was fucked, had to restore them from another PC. However, this virus sets everything to hidden and removes access to the "Folder Options" plus setting a policy on regedit. Bad for him, everything running under SYSTEM is not restricted. And this is where you can fuck him or any other fucker out of your system while running live, no reboot.
@Nor9864
11 жыл бұрын
Likin this video schedule! :D
@newaccount5024
4 жыл бұрын
Gold Experience Requirm
@Ac1DMoDz
11 жыл бұрын
Wow four videos in a week! That's a new record for Dan.
@IkanGelamaKuning
4 жыл бұрын
It was a hard week, way back in 2006. To clean this. Disable all removable usb drive. I think hr fired one personnel that use usb drive for personal use at office which started this war.
@DJTwiXt178
11 жыл бұрын
@ahmedboy, anything in the title bar that says .exe (the blue thing at the top of the screen) will make it reboot. you can still run notepad like he did in the video.
@platinoir
3 ай бұрын
I had this annoying malware. Anytime I downloaded any software it rebooted Was lucky enough to find a small size antivirus for it that I was able to download it fully before it rebooted. to this day that was the virus I remember the most for how annoying it was
@KaraokePubmain
5 жыл бұрын
I was performaing a sequencer band before and got hit by that bastard some long ago. I called on all the Saints to save me because i was performing into a large crowd and my laptop gone crazy.
@danooct1
11 жыл бұрын
either scan with an antivirus or boot into safe mode and delete the files it dropped. i made a video on it but it was incredibly boring because it was just about deleting files for 10 minutes.
@Alex-qt9om
8 жыл бұрын
i have found out why it reboots your computer when a title bar has .exe in it the worm may thing that you are looking in its code and trying to edit it so its shuts your computer off. I wonder what would happen if when your computer suddenly rebooted it tryed to automaticly open all the programs you had open and it opened the txt file that had .exe in it oh god.
@ALLENWinWizzy2
11 жыл бұрын
Moar videos flyin in dis is dream
@seanfoster8559
11 жыл бұрын
Friends that piss me off will get a 'friendly' program :)
@CabaProduction
11 жыл бұрын
This E-Mail Worm was originated from Indonesia.
@ArachmadiPutra
2 жыл бұрын
this is the most famous virus in my region, yeah ! 🤣🤣🤣
@Slawek361
11 жыл бұрын
oh my god!! Danooct uploading videos! :D
@vSwaGGerMoDz
11 жыл бұрын
The one dislike is The owner of Brontok :P
@chengwong3307
9 жыл бұрын
Replying to a 1 year old comment :D
@spookwave0074
7 жыл бұрын
+Cheng Wong Replying to a 2 year old comment
@dun2160
6 жыл бұрын
Replying to a 4 year and 1 month old comment.
@aloxado320
5 жыл бұрын
Replying to a 5 year comment
@Kizylle
11 жыл бұрын
i think also it was installed via internet, not the disk.
@mr_darky329
6 жыл бұрын
danooct1 missed one file in the "my documents" folder. there the message in the html-file from the creators of the virus was.
@winfr34k
11 жыл бұрын
Awesome vid, thanks!
@albynoson
11 жыл бұрын
0:59 I was wondering if there was malware that had a stealth technique sort of like that. But I was thinking of something more realistic, such as: a .exe piece of malware has the icon for a word document. When it's run, say, form the desktop, it moves itself somewhere else, places a .doc on the desktop, and opens that document. Speaking of .exe, I wonder if the reason this Brontok worm hides file extensions and folder options so that someone can't remove it by renaming it to .com or .txt
@IrisGalaxis
4 жыл бұрын
Wow, didn't know XP has AUTOEXEC.BAT . Or is it just a dummy for NTVDM?
@Blackner2424reborn
11 жыл бұрын
CIH rewrites the bios, so even getting a new HDD/SSD doesn't save you. You can't even run a different OS. You have to reformat, AND get a new mobo (or reflash your bios, but back then, it was easier just to buy a new computer)
@scab3045
2 жыл бұрын
I remember taking my pc in to have the virus removed and the guy was unsuccessful
@Toblerown_ch
5 жыл бұрын
A few years later, my windows 8 laptop has got infected with it
@iKillSceneKidz
10 жыл бұрын
I had this virus before. Doesn't a green pop up appear randomly ? I used to have this virus and gave it to my friend through a USB he let me borrow
@Neko_Jonez
9 жыл бұрын
I'm so gonna test out this virus. Might be a nice challenge to get rid of it :D.
@Neko_Jonez
9 жыл бұрын
In a VM of course. : 3
@niikiyama
9 жыл бұрын
NekoJonez k
@Neko_Jonez
9 жыл бұрын
Anon Ops At least, I don't care about your trolling ^w^
@beastmetropolis
8 жыл бұрын
+Sheldetin So what if he does act weird?
@beastmetropolis
8 жыл бұрын
Sheldetin Are you saying only weebs are weird?
@iodbc
11 жыл бұрын
dear god he's posting regularly again
@kddlb
11 жыл бұрын
Memories
@MoonMan-nm9ps
7 жыл бұрын
there are different variants of this worm... i got this worm back in 2008 and got the brontok.a variant as also the brontok.k variant... as I know there are tons of variants for this worm...
@MoonMan-nm9ps
7 жыл бұрын
a real pain in the ass to remove it...
@emirvmendoza
4 жыл бұрын
Avira detected that my WIndows 10 PC has this virus, but Windows Defender does not. Should I be scared?
@MiftahSoftware
7 жыл бұрын
there are some missing in brontok when open random run there are some text for webiste and anthor is JawoBot [In Indonesia]
@GalaxinTM
Жыл бұрын
this was infected in one of our PCs
@SuperTed19021
11 жыл бұрын
That's the Marker Macro Virus.
@jozkaman
11 жыл бұрын
Lol .exe :D How do you get rid of this? Some .bat, i guess? Nice worm.
@DellLenovo
5 жыл бұрын
idk why, but i find the virus hilarious what it does
@MagikGimp
11 жыл бұрын
Now THAT'S malware!
@herrabanani
11 жыл бұрын
he doesn't focus on that. this channel is about showcasing the viruses not how to remove them.
@BimBims
6 ай бұрын
Anjay, virus paling mudah di take down pada masanya oleh temen-temen gw di warnet wkwkwkw cuma modal rename yang itu langsung rontok bro wkwkwkwk
@MrKostaCoffee
11 жыл бұрын
safe mode.
@theschnookle
11 жыл бұрын
voice got deeper.
@killerblocks
11 жыл бұрын
If they were really clever, they would have made it so it changes everything to have .exe in it, so you cant do jack squat without it rebooting
@LDTVProductions
11 жыл бұрын
o hai danooct1!
@itsover.7156
8 жыл бұрын
If you want to remove it and fix damage, you can buy Norton CD. It does have some useful tools.
@itsover.7156
7 жыл бұрын
But CD of Internet Security 2013 is useful because of OEM live CD function
@itsover.7156
7 жыл бұрын
. JJ1013 It fixed MBR trojan.
@SpookySkeleton738
11 жыл бұрын
Probably just safe mode with networking and MBAM
@VerifiedThug
6 жыл бұрын
this virus was my fav to outsmart. it was the most annoying virus ever. wud close the browser if u type virus or anti. nod32 had the solution for this virus
@Flyinghotpocket
11 жыл бұрын
dude i love to see more XP windows virus videos. not talking adware or spyware. i know there are loads of regular viruses and worm that were spread rapidly through kazaa back in the day. lets see more! plz!
@mordekaiser_1312
7 жыл бұрын
noob question: sice xp has an nt kernel, is autoexec.bat, msdos.sys and config.sys any useful on windows xp?
@Sypaka
6 жыл бұрын
They are there for compatibility reasons with older programs. I think those files don't exist on Windows XP x64, as there is no 16-bit subsystem (NTVDM), which is a DOS emulator.
@BecomeGgamer
9 жыл бұрын
man i like u so much
@zyrlmilesaguitong1598
4 жыл бұрын
HOW DO I REMOVE THIS VIRUS?? I CANT REMOVE THIS FILE. I CANT ACCESS TASKMANAGER AND REGEDIT(EVEN COMMAND PROMPT). EVEN THOUGH I Remove the DisableTaskMgr, DisableRegedit. It keeps popping out
@Fyralism
11 жыл бұрын
Can you show me how to show the file extensions on windows 8?
@dtvdavid
5 жыл бұрын
I got this virus-variant in 2011(!), because my drunk roommate inserted an infected usb drive... I removed with linux live-CD.
@cumdowner2611
3 жыл бұрын
My mom's bf got this shit, i'm trying everything but that crap reinstalls itself and keeps rebooting pc when i delete new files that it created
@Oreoezi
6 жыл бұрын
Besides self protection, what was the worm trying to achieve. what would the developer gain from it
@sodaddict
6 жыл бұрын
Apparently it was made as a protest against the Indonesian government at the time.
@Oreoezi
6 жыл бұрын
Thanks a lot
@CenetaurmanE52
11 жыл бұрын
I...don't think there's any malware that activates a self-destruct sequence.
@chedda
11 жыл бұрын
You should start making videos on how to remove them, would be interesting.
@somard1
11 жыл бұрын
Two questions, do you use virtual box? And if so, how do you move files to your virtual machine?
@cammybrown1988
11 жыл бұрын
Love how there are no dislikes
@Paperclip8902
10 жыл бұрын
Can you make one with the Anti-CMOS DOS virus
@MrUltimo0000
11 жыл бұрын
i was thinking about your name: Dano = Danny, Oct1 = birthdate? if the equasion be correct, you should have done a bday virus
@kidddd66
11 жыл бұрын
can u see it from command prompt and with dir /a h *.* ?
@RusticKey
10 жыл бұрын
Interesting.
@NotBen101
11 жыл бұрын
so how do you get rid of this
@ALLENWinWizzy2
11 жыл бұрын
Windows xp on dannoct? How many years have this been....?
@LeQuack911
10 жыл бұрын
This virus is still trending in Pakistan because here people are like Potatoes....
@GIGAGORGO
11 жыл бұрын
Dan yoy should do the "U steal music i lock your computer" virus
@RealDownTownShit
11 жыл бұрын
I had this clever little fucker. I recommend installing the ESET Smart Security, it got rid of the virus immediately.
@nicholasplaysroblox7526
10 жыл бұрын
#BringXPBack
@aaronwise1089
8 жыл бұрын
What da frick this worm sounds nasty
@MattMoney
8 жыл бұрын
Couldnt you just send it to the recycle bin?
@enlightenedcreeper3677
7 жыл бұрын
Mettaton I don't think you understand this worm... it is already in the registry so even if it is deleted there's a copy added in the registry that runs it on startup
Пікірлер: 195